Lucene search

K
freebsdFreeBSD9B718B82-8EF5-11DC-8E42-001C2514716C
HistoryAug 29, 2007 - 12:00 a.m.

gallery2 -- multiple vulnerabilities

2007-08-2900:00:00
vuxml.freebsd.org
16

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

0.01

Percentile

84.1%

Gallery project reports:

Gallery 2.2.3 addresses the following security vulnerabilities:

Unauthorized renaming of items possible with WebDAV (reported
by Merrick Manalastas)
Unauthorized modification and retrieval of item properties
possible with WebDAV
Unauthorized locking and replacing of items possible with
WebDAV
Unauthorized editing of data file possible via linked items with
Reupload and WebDAV (reported by Nicklous Roberts)

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchgallery2< 2.2.3UNKNOWN

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

0.01

Percentile

84.1%

Related for 9B718B82-8EF5-11DC-8E42-001C2514716C